July 2017

5 results · Clear filters · Feed

• Critical 9.8
  CVE-2017-6316 Exploited Public exploit EPSS 73%

  Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as …

  Jul 20, 2017

  KEV Mar 25, 2022
• Critical 9.8
  CVE-2017-11467 Public exploit EPSS 73%

  OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection

  OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request.

  com.orientechnologies:orientdb-core Maven
  Jul 20, 2017
• Critical 9.8
  CVE-2016-6798 Public exploit

  XML External Entity Reference in Apache Sling

  In the XSS Protection API module before 1.0.12 in Apache Sling, the method XSS.getValidXML() uses an insecure SAX parser to validate the input string, which allows for XXE attacks in all scripts which use this method to validate user input, potentially allowi…

  Apache Software Foundation Apache Sling org.apache.sling:org.apache.sling.xss org.apache.sling:org.apache.sling.xss.compat Maven
  Jul 19, 2017
• Critical 9.8
  CVE-2017-9791 Exploited Public exploit Scanner template EPSS 99%

  Code execution in Apache Struts 1 plugin

  The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.

  Apache Software Foundation Apache Struts org.apache.struts:struts2-struts1-plugin Maven
  Jul 10, 2017

  KEV Feb 10, 2022
• Critical 9.8
  CVE-2017-9248 Exploited Public exploit EPSS 75%

  Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does no…

  Jul 3, 2017

  KEV Nov 3, 2021